Privacy Policy

1. Introduction

MyTreda, a product of MYTREDA TECHNOLOGIES LTD ("we", "our", or "us"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our inventory management platform designed for Nigerian traders.

This policy is compliant with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR) 2019, as administered by the Nigeria Data Protection Commission (NDPC).

2. Data Controller

MYTREDA TECHNOLOGIES LTD, operating as MyTreda, is the data controller responsible for your personal data. For any questions about this policy or your data rights, contact us at:

• Email: privacy@mytreda.com
• Address: Lagos, Nigeria

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide

• Account Information: Full name, email address, phone number (including WhatsApp number), password
• Business Information: Business name, business type, business address
• Transaction Data: Sales records, inventory data, customer names, debt records

3.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type
• Usage Data: Features used, time spent on the platform, actions taken
• Log Data: IP address, access times, pages viewed

4. Purpose and Legal Basis for Processing

We process your personal data based on the following lawful grounds under the NDPA 2023:

5. WhatsApp Notifications

We use the official WhatsApp Business API (provided by Meta Platforms, Inc.) to send you notifications. By providing your WhatsApp number and enabling notifications, you consent to:

• Receiving daily sales reports at your chosen time
• Receiving debt reminders and low stock alerts
• Your phone number being shared with Meta Platforms, Inc. for message delivery

You can withdraw consent and disable WhatsApp notifications at any time in your notification settings. Messages will be sent from our registered WhatsApp Business number.

6. Data Sharing and Third Parties

We may share your personal data with:

• Meta Platforms, Inc.: For WhatsApp message delivery (phone numbers only)
• Cloud Service Providers: For hosting and data storage (data is encrypted)
• Payment Processors: For processing subscription payments
• Legal Authorities: When required by Nigerian law or court order

We do not sell your personal data to third parties. All third-party processors are bound by data processing agreements that ensure compliance with Nigerian data protection laws.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure password hashing using industry-standard algorithms
• Regular security assessments and updates
• Access controls limiting data access to authorized personnel only
• Secure cloud infrastructure with data centers that meet international standards

8. Data Retention

We retain your personal data for the following periods:

• Account Data: For the duration of your account plus 2 years after deletion
• Transaction Records: 6 years (to comply with Nigerian tax and business laws)
• Usage Logs: 12 months
• WhatsApp Numbers: Until you disable notifications or delete your account

After the retention period, data is securely deleted or anonymized.

9. Your Rights Under Nigerian Law

Under the NDPA 2023 and NDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (for consent-based processing)

To exercise any of these rights, contact us at privacy@mytreda.com. We will respond within 30 days.

10. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC):

• Website: https://ndpc.gov.ng
• Email: info@ndpc.gov.ng

11. International Data Transfers

Your data may be processed on servers located outside Nigeria. When we transfer data internationally, we ensure adequate safeguards are in place as required by the NDPA, including:

• Standard contractual clauses approved by the NDPC
• Transfers to countries with adequate data protection levels
• Encryption and security measures during transfer

12. Children's Privacy

MyTreda is intended for use by business owners and traders who are 18 years of age or older. We do not knowingly collect personal data from children under 18. If you believe we have collected data from a minor, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. The "Last Updated" date at the top indicates when this policy was last revised.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

• Email: privacy@mytreda.com
• Support: support@mytreda.com